summaryrefslogtreecommitdiffstats
path: root/internal/pwhash/pwhash.go
blob: 97ce19953151f9ec44877a789f9bb785048e6438 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
package pwhash

import (
	"crypto/pbkdf2"
	"crypto/sha256"
	"crypto/sha512"
)

const SaltLen = 32

const defaultIterations = 3670016 // from cmd/finditers

func HashIter(password string, salt []byte, iter int) ([]byte, error) {
	return pbkdf2.Key(sha256.New, password, salt, iter, 32)
}

func Hash(password string, salt []byte) (key, pwhash []byte, err error) {
	hashed, err := HashIter(password, salt, defaultIterations)
	if err != nil {
		return nil, nil, err
	}
	sha := sha512.Sum512(hashed)
	return hashed, sha[:], nil
}